Researchers crafted a malicious URL using the format https://copilot.microsoft.com/?q=&autorun=1 to execute prompts without user interaction or visible confirmation

From the articleCopilot tricked into telling reseachers how to hack itselfAlso in Microsoft Copilot reveals secret input that allowed it to be hacked